UTA0576 exploits CVE-2026-104935 and chained Ivanti Connect Secure flaws to gain root access using in-memory payloads and log ...
Japanese web systems face rising data leaks as attackers exploit API flaws, weak authentication, and software vulnerabilities ...
# Simulation Script for Detection Validation # This script mimics the behavior defined in the Sigma rule $workingDir = $env:TEMP $dllName = "libgcc_s_seh-1.dll ...
Fake event invitations lead victims through RSVP and CAPTCHA pages to install a RAT, enabling attackers to remotely control ...
Unauthorized access incidents at Japanese organizations leaked personal data via known flaws, Metabase SQL injection, API ...
A critical unauthenticated SQL injection vulnerability in Metabase version 0.58 and later allows attackers to obtain administrator access to the application database. This flaw can enable theft of ...
Adception abuses Google ads, Bing redirects, compromised sites, and clipboard manipulation to deliver malicious payloads to ...
China-linked threat actors combine automated tools with hands-on hacking techniques to steal sensitive data in targeted cyber ...
Test and strengthen defenses against Dire Wolf ransomware by validating detection coverage, response readiness, and security ...
Suspected TraderTraitor actors abuse a trojanized Terraform provider to deploy cross-platform malware targeting credentials ...
BlueMoon chains Chrome V8 flaws with a Windows kernel exploit to deploy GemStone, ShadowPad, and Rust-based malware in ...
ClickFix abuses browser cache smuggling, VBScript, PowerShell, and .NET payloads to bypass Windows Run limits and steal ...